ISSO: DoD RMF & Compliance Lead (Hybrid)

MSI Defense Solutions; Mooresville (NC); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

401(k) with employer match

Health Insurance

Paid Time Off

Paid Parental Leave

Vision Insurance

Job summary

MSI Defense Solutions is seeking an Information Systems Security Officer (ISSO) to lead security, compliance, and operational integrity for classified and unclassified information systems. The ISSO will ensure RMF, NIST SP 800-171/800-53, and CMMC requirements are met and will manage ATO packages, assessments, and continuous monitoring.

The role partners with IT, Security, Engineering, and program teams, reporting to the Digital Technology Manager.

Qualifications

• Bachelor's degree in cybersecurity or related field.
• 5+ years of DoD/federal contractor cybersecurity experience.
• Strong RMF, NIST 800-53/800-171, and CMMC knowledge.
• Experience with ATO packages and Microsoft 365 GCC High, Azure, Defender.
• Experience with vulnerability management and SIEM.

Responsibilities

• Serve as the ISSO for classified and unclassified information systems.
• Maintain RMF, NIST SP 800-53/171, CMMC compliance across environments.
• Develop, maintain SSPs, POA&Ms, SARs, and RMF artifacts.
• Administer and maintain GRC platforms (e.g., IntelliGRC).
• Support ATO, ATC, and continuous monitoring activities.
• Ensure security controls are implemented and maintained across systems.
• Coordinate vulnerability scanning, patching, and secure configurations.
• Lead incident response activities and documentation.
• Manage user access controls and least privilege enforcement.
• Lead internal audits, DCSA assessments, and customer inspections.

Skills

RMF knowledge

NIST 800-53

NIST 800-171

CMMC Level 2

STIGs

ATO management

SIEM familiarity

Documentation

Communication

Collaboration

Education

Bachelor's degree or equivalent

Tools

IntelliGRC

Microsoft 365 GCC High

Azure Active Directory

Microsoft Defender

Intune

Job description

MSI Defense Solutions is seeking an Information Systems Security Officer (ISSO) to lead security, compliance, and operational integrity for classified and unclassified information systems. The ISSO will ensure RMF, NIST SP 800-171/800-53, and CMMC requirements are met and will manage ATO packages, assessments, and continuous monitoring.

The role partners with IT, Security, Engineering, and program teams, reporting to the Digital Technology Manager.